1.1.0.66

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-30	CVE-2020-35803	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. local low complexity netgear	2.1
2020-12-30	CVE-2020-35800	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. network low complexity netgear critical	9.7
2020-12-30	CVE-2020-35799	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. network low complexity netgear CWE-787	7.5
2020-12-30	CVE-2020-35795	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. network low complexity netgear CWE-120	7.5
2020-12-30	CVE-2020-35787	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. low complexity netgear CWE-120	5.2
2020-10-13	CVE-2020-17409	Authentication Bypass Using an Alternate Path or Channel vulnerability in Netgear products This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. low complexity netgear CWE-288	3.3
2020-10-09	CVE-2020-26929	Command Injection vulnerability in Netgear R6220 Firmware and R6230 Firmware Certain NETGEAR devices are affected by command injection by an authenticated user. low complexity netgear CWE-77	5.2
2020-10-09	CVE-2020-26927	Improper Authentication vulnerability in Netgear products Certain NETGEAR devices are affected by authentication bypass. network low complexity netgear CWE-287	7.5
2020-10-09	CVE-2020-26916	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. low complexity netgear	5.8
2020-10-09	CVE-2020-26914	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. low complexity netgear CWE-77	5.2